SYSTEM FOR DECOMPOSING EVENTS FROM MANAGED INFRASTRUCTURES WITH SEMANTIC CLUSTERING
First Claim
1. A system for decomposing events from a managed infrastructure, comprising:
- a first engine that receives data from a managed infrastructure that includes managed infrastructure physical hardware which supports the flow and processing of information;
a second engine that determines common characteristics of events and produces clusters of events relating to the failure of errors in the managed infrastructure, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information, and producing events that relate to the managed infrastructure while converting the events into words and subsets used to group the events that relate to failures or errors in the managed infrastructure, including the managed infrastructure physical hardware; and
a semantic clustering engine that takes text from an event source, manipulates the text to produce a feature vector, and the vector is feed into a clustering engine; and
wherein a change to a managed infrastructure physical hardware component is made.
4 Assignments
0 Petitions
Accused Products
Abstract
A system is provided for decomposing events from managed infrastructures. A first engine is configured to receive message data from a managed infrastructure that includes managed infrastructure physical hardware that supports the flow and processing of information, the at least one engine is configured to determine common characteristics of events and produce clusters of events relating to the failure of errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in a physical hardware of the managed infrastructure directed to supporting the flow and processing of information. The first engine is configured to create one or more situations that is a collection of one or more events or alerts representative of the actionable problem in the managed infrastructure. A second engine is configured to determine one or more common steps from events and produces clusters relating to events. The second engine determines one or more common characteristics of events and produces clusters of events relating to the failure or errors in the managed infrastructure. The system is configured to use data-driven fault localization, more particularly using semantic clustering.
5 Citations
22 Claims
-
1. A system for decomposing events from a managed infrastructure, comprising:
-
a first engine that receives data from a managed infrastructure that includes managed infrastructure physical hardware which supports the flow and processing of information; a second engine that determines common characteristics of events and produces clusters of events relating to the failure of errors in the managed infrastructure, where membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware managed infrastructure directed to supporting the flow and processing of information, and producing events that relate to the managed infrastructure while converting the events into words and subsets used to group the events that relate to failures or errors in the managed infrastructure, including the managed infrastructure physical hardware; and a semantic clustering engine that takes text from an event source, manipulates the text to produce a feature vector, and the vector is feed into a clustering engine; and wherein a change to a managed infrastructure physical hardware component is made. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22)
-
Specification